Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/417c1d-a2e4-44a6-af24-d4f5027600ae/1/5dJyqNwEH1rcer0A1k0_MsIE2rI.mft
File: 5dJyqNwEH1rcer0A1k0_MsIE2rI.mft (raw, json)
Hash identifier: 60Taz3ek1Cb+UPWvFZB+rtjqNxGn8Oza6ZymxaQGZQk=
Subject key identifier: 37:00:E4:B9:33:62:01:89:2A:96:22:62:2E:2A:A5:B2:A3:D3:8A:5E
Authority key identifier: E5:D2:72:A8:DC:04:1F:5A:DC:7A:BD:00:D6:4D:3F:32:C2:04:DA:B2
Certificate issuer: /CN=e5d272a8dc041f5adc7abd00d64d3f32c204dab2
Certificate serial: 019FAA87FDF061C07D1DCD2F9E51FE68D8C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5dJyqNwEH1rcer0A1k0_MsIE2rI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/417c1d-a2e4-44a6-af24-d4f5027600ae/1/5dJyqNwEH1rcer0A1k0_MsIE2rI.mft
Manifest number: 108D
Signing time: Tue 28 Jul 2026 21:01:06 +0000
Manifest this update: Tue 28 Jul 2026 21:01:06 +0000
Manifest next update: Wed 29 Jul 2026 21:01:06 +0000
Files and hashes: 1: 5dJyqNwEH1rcer0A1k0_MsIE2rI.crl (hash: z8KIMPByNAyv6sTyfx1EpbSLIyRVfRcFEtYtks9AFGc=)
2: JB8RpMy8Elqc90uZwoSTL7Ub9OM.roa (hash: EhChNPxJv+f83uqvMXFZRPaKproZQgsDNAIW+MBK7d0=)
3: iRQgfXGareNueuLCIctR3v98BqA.roa (hash: kAKY6Tag+JlVYUh6YTHrUL0leqbQ2DPtbgkhBL53tDU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/417c1d-a2e4-44a6-af24-d4f5027600ae/1/5dJyqNwEH1rcer0A1k0_MsIE2rI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/417c1d-a2e4-44a6-af24-d4f5027600ae/1/5dJyqNwEH1rcer0A1k0_MsIE2rI.mft
rsync://rpki.ripe.net/repository/DEFAULT/5dJyqNwEH1rcer0A1k0_MsIE2rI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:87:fd:f0:61:c0:7d:1d:cd:2f:9e:51:fe:68:d8:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5d272a8dc041f5adc7abd00d64d3f32c204dab2
Validity
Not Before: Jul 28 21:01:06 2026 GMT
Not After : Jul 29 21:01:06 2026 GMT
Subject: CN=3700e4b9336201892a9622622e2aa5b2a3d38a5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:88:f0:8d:77:f7:3c:fe:52:3b:7b:b3:b4:a5:
fb:67:56:29:ce:6f:fc:6a:0f:da:76:17:5b:3b:3a:
f2:10:5c:7d:58:55:e9:1f:23:6e:6b:c2:e9:1d:c2:
f6:23:a3:a3:38:fb:43:8d:aa:da:e9:4e:81:91:87:
2c:35:02:cf:82:b5:f8:3f:e6:d3:33:e7:80:df:23:
32:40:ff:2e:c6:06:09:b3:56:a3:ef:8d:c4:1b:49:
1b:a6:9c:17:eb:74:0d:34:db:57:8c:02:50:39:02:
ea:57:e9:7a:63:9b:1f:05:9a:02:25:c3:15:9c:5e:
c2:da:ca:af:f5:f4:ed:a0:19:1f:75:1b:2a:d8:af:
7e:3b:83:04:81:53:03:73:06:40:90:46:cb:81:cc:
88:97:78:2b:14:42:fa:1d:15:b9:11:ac:df:10:02:
61:34:b3:c1:34:0e:59:39:aa:1c:2e:8c:98:73:97:
72:34:8e:26:d9:df:62:9d:89:f1:1d:44:3d:be:83:
d1:9b:c6:cf:b6:06:b8:56:a6:62:45:a8:ea:2f:a3:
01:97:f2:97:ab:df:5e:2f:ce:c7:d2:24:8d:81:c6:
50:99:c3:5e:e4:f2:6f:5a:46:74:79:ee:52:55:ef:
56:1c:92:f4:d3:23:4d:47:f1:f6:b7:60:8e:3a:77:
3a:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:00:E4:B9:33:62:01:89:2A:96:22:62:2E:2A:A5:B2:A3:D3:8A:5E
X509v3 Authority Key Identifier:
keyid:E5:D2:72:A8:DC:04:1F:5A:DC:7A:BD:00:D6:4D:3F:32:C2:04:DA:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5dJyqNwEH1rcer0A1k0_MsIE2rI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/417c1d-a2e4-44a6-af24-d4f5027600ae/1/5dJyqNwEH1rcer0A1k0_MsIE2rI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/417c1d-a2e4-44a6-af24-d4f5027600ae/1/5dJyqNwEH1rcer0A1k0_MsIE2rI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:ba:30:8a:08:86:68:0e:43:d1:8d:84:b0:2c:fb:09:e5:1f:
cb:2c:9f:40:dd:1e:79:0d:81:16:f6:12:62:08:10:b2:0e:7f:
bd:4d:00:00:dd:5a:3a:0e:0a:d8:18:24:0c:55:0f:5f:f2:c7:
b3:91:ee:e7:d6:62:de:b8:4a:30:3c:f1:65:c7:ee:88:42:58:
1a:ff:1f:5d:b9:eb:93:5b:80:05:33:2b:3c:22:58:63:c5:b8:
43:89:da:f3:4d:80:72:44:8f:70:f3:5a:63:33:33:42:3e:e6:
07:63:ad:4d:95:ce:bc:25:7e:ea:71:7b:d3:32:f0:82:e1:15:
50:a4:aa:1a:67:b0:00:9e:d1:1a:c0:b3:89:f3:3a:24:c3:9d:
39:27:00:a6:17:45:06:79:08:10:be:50:3e:10:0a:a9:8d:5c:
53:31:6a:9c:59:7c:37:f5:a6:41:f3:0d:60:70:be:d2:fb:15:
ef:85:9e:fe:c8:b5:7c:7c:f5:36:49:e2:e3:a1:a2:10:1a:08:
8f:95:81:15:60:6a:86:d3:e1:f3:16:4a:7d:be:b8:1c:47:7d:
7c:38:b0:27:d5:be:88:f7:f5:7b:f4:5a:14:ca:1b:af:6c:a6:
77:54:52:4d:c9:7f:3d:bd:d7:46:d5:57:86:bb:88:eb:cb:10:
b8:c5:b3:c9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+qh/3wYcB9Hc0vnlH+aNjCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1ZDI3MmE4ZGMwNDFmNWFkYzdhYmQwMGQ2NGQzZjMyYzIw
NGRhYjIwHhcNMjYwNzI4MjEwMTA2WhcNMjYwNzI5MjEwMTA2WjAzMTEwLwYDVQQD
EygzNzAwZTRiOTMzNjIwMTg5MmE5NjIyNjIyZTJhYTViMmEzZDM4YTVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApIjwjXf3PP5SO3uztKX7Z1Ypzm/8
ag/adhdbOzryEFx9WFXpHyNua8LpHcL2I6OjOPtDjara6U6BkYcsNQLPgrX4P+bT
M+eA3yMyQP8uxgYJs1aj743EG0kbppwX63QNNNtXjAJQOQLqV+l6Y5sfBZoCJcMV
nF7C2sqv9fTtoBkfdRsq2K9+O4MEgVMDcwZAkEbLgcyIl3grFEL6HRW5EazfEAJh
NLPBNA5ZOaocLoyYc5dyNI4m2d9inYnxHUQ9voPRm8bPtga4VqZiRajqL6MBl/KX
q99eL87H0iSNgcZQmcNe5PJvWkZ0ee5SVe9WHJL00yNNR/H2t2COOnc6NwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDcA5LkzYgGJKpYiYi4qpbKj04peMB8GA1UdIwQY
MBaAFOXScqjcBB9a3Hq9ANZNPzLCBNqyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNWRKeXFOd0VIMXJjZXIwQTFrMF9Nc0lFMnJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi80MTdjMWQtYTJlNC00NGE2LWFmMjQt
ZDRmNTAyNzYwMGFlLzEvNWRKeXFOd0VIMXJjZXIwQTFrMF9Nc0lFMnJJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi80MTdjMWQtYTJlNC00NGE2LWFmMjQtZDRmNTAyNzYwMGFl
LzEvNWRKeXFOd0VIMXJjZXIwQTFrMF9Nc0lFMnJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOLowigiG
aA5D0Y2EsCz7CeUfyyyfQN0eeQ2BFvYSYggQsg5/vU0AAN1aOg4K2BgkDFUPX/LH
s5Hu59Zi3rhKMDzxZcfuiEJYGv8fXbnrk1uABTMrPCJYY8W4Q4na802AckSPcPNa
YzMzQj7mB2OtTZXOvCV+6nF70zLwguEVUKSqGmewAJ7RGsCzifM6JMOdOScAphdF
BnkIEL5QPhAKqY1cUzFqnFl8N/WmQfMNYHC+0vsV74We/si1fHz1Nkni46GiEBoI
j5WBFWBqhtPh8xZKfb64HEd9fDiwJ9W+iPf1e/RaFMobr2ymd1RSTcl/Pb3XRtVX
hruI68sQuMWzyQ==
-----END CERTIFICATE-----
Generated at Wed Jul 29 07:19:15 2026 by rpki-client